Introduction

Rex's Restaurant ("we", "our") is committed to protecting your privacy. This privacy policy explains how we collect, use, store, and protect your personal data when you place orders through our online ordering system.

Data Controller and Data Processor

Rex's Restaurant is the data controller for personal data collected through the ordering system. The technical ordering system is provided by zapfood, which acts as a data processor on behalf of Rex's Restaurant.

Data Controller:

Rex's Restaurant

Data Processor:

ZapFood
[email protected]

Legal Basis for Processing

We process your personal data on the following grounds:

• Performance of a contract — to process, prepare, and deliver your orders.
• Legitimate interest — to improve our services, prevent fraud, and ensure platform security.
• Legal obligation — to comply with applicable tax, accounting, and food safety requirements.
• Consent — for marketing communications, which you may withdraw at any time.

Information We Collect

When you place an order or create an account, we may collect the following information:

• Contact information — name, phone number, email address.
• Delivery address — for delivery orders only.
• Order history and preferences — items ordered, dietary information, and order frequency.
• Payment information — processed securely through third-party payment providers; we do not store full card details.
• Loyalty program data — bonus wallet, stamps, rewards, and customer tier.
• Session data — anonymous browsing sessions for order processing and platform functionality.
• Device and usage data — browser type, IP address, and general location data for service optimization and fraud prevention.

How We Use Your Information

We use your information for the following purposes:

• Processing, preparing, and delivering orders.
• Delivering orders to the address you provide.
• Managing loyalty membership and rewards.
• Sending order confirmations, receipts, and delivery updates.
• Improving menus, service quality, and the ordering system.
• Complying with applicable legal and regulatory requirements.
• Sending marketing communications (only with your consent).

Information Sharing

We may share your information with the following parties only to the extent necessary to fulfill the stated purposes:

• Payment processors (such as Stripe, Paytrail, Visma Pay, or other locally available providers) for secure payment processing.
• Delivery partners for fulfilling delivery orders.
• zapfood as the technical provider of our ordering system.

We do not sell your personal data to third parties.

International Data Transfers

Some of our service providers may process data outside your country of residence. In such cases, we ensure that appropriate safeguards are in place in accordance with applicable data protection legislation (such as Standard Contractual Clauses or equivalent mechanisms recognized by local law) to protect your personal data.

Data Retention

We retain your order data for as long as necessary to fulfill the purposes described in this policy and to comply with applicable legal obligations, including tax and accounting requirements. Retention periods may vary depending on local legislation. You may request deletion of your account and personal data at any time through your account settings or by contacting us directly. Please note that certain data may need to be retained to fulfill legal obligations even after account deletion.

Your Rights

Depending on the legislation of your country of residence, you may have the right to:

• Access your personal data.
• Rectification of inaccurate or incomplete data.
• Deletion of your personal data (subject to legal retention requirements).
• Transfer your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Object to or restrict processing in certain circumstances.
• Lodge a complaint with your local data protection authority.

You can exercise these rights through your account settings or by contacting us directly at the email address provided below.

Cookies and Tracking

Our ordering system uses cookies and session data that are essential for the operation of the service (e.g., maintaining your shopping cart and processing orders). We do not use third-party advertising tracking. For more information, please refer to the cookie notice that may be displayed on the ordering platform.

Children's Privacy

Our service is not directed at children under 16 years of age (or below the age of digital consent under applicable local law). We do not knowingly collect personal data from children without parental consent.

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through our ordering system or by email. Continued use of our services after updates constitutes acceptance of the modified policy.

Contact Us

For privacy questions regarding Rex's Restaurant, please contact us: